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AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently Amended) A computer program product stored on a computer-readable 
medium for controlling a computer to scan data accessible via an internet link for malware, said 
computer program product comprising: 

(i) address identifying code operable to identify within currently held data at least 
one internet address associated with said currently held data; 

(ii) retrieving code operable to pre-emptively retrieve via said internet link addressed 
data that would be accessed by a user following corresponding to said at least one internet 
address; and 

(iii) scanning code operable to scan said addressed data for malware. 

2. (Original) A computer program product as claimed in claim 1, further comprising storing 
code operable to store result data identifying at least addressed data in which malware was not 
found. 

3. (Original) A computer program product as claimed in claim 1, wherein said address 
identifying code is operable to search within said currently held data for string data having a 
format matching a pointer to an internet address. 

4. (Original) A computer program product as claimed in claim 1, wherein said currently 
held data includes received e-mail messages. 

5. (Original) A computer program product as claimed in claim 1, wherein said scanning 
code is operable to seek to detect within said addressed data one or more of: 

computer viruses; 

worms; 

Trojans; 
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banned computer programs; 
banned words; or 
banned images. 

6. (Original) A computer program product as claimed in claim 1, wherein said computer is a 
firewall computer via which internet traffic is passed to a local computer network. 

7. (Original) A computer program product as claimed in claim 1, wherein said addressed 
data is cached when it has been retrieved. 

8. (Original) A computer program product as claimed in claim 1, wherein if malware is 
detected within said addressed data, then one or more malware found actions are triggered. 

9. (Currently Amended) A computer program product as claimed in claim 1, wherein said 
malware found actions including at least one of: 

(i) preventing access to said currently held data; 

(ii) removing said at least one internet address from said currently held data; 

(iii) preventing access to said addressed data; 

(iv) removing said malware from said addressed data to generate clean addressed data 
and supplying said clean addressed data in place of said addressed data; 

(ivv) blocking internet access by a computer detected to be seeking to access said at 
least one internet address. 

10. (Currently Amended) A method of scanning data accessible via an internet link for 
malware, said method comprising the steps of: 

(i) identifying within currently held data at least one internet address 
associated with said currently held data; 

(ii) pre-emptively retrieving via said internet link addressed data that would be 
accessed by a user following corresponding to said at least one internet address; and 

(iii) scanning said addressed data for malware. 
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11. (Original) A method as claimed in claim 10, further comprising storing result data 
identifying at least addressed data in which rnalware was not found. 

12. (Original) A method as claimed in claim 10, wherein said step of identifying includes 
searching within said currently held data for string data having a format matching a pointer to an 
internet address. 

13. (Original) A method as claimed in claim 10, wherein said currently held data includes 
received e-mail messages. 

14. (Original) A method as claimed in claim 10, wherein said step of scanning seeks to detect 
within said addressed data one or more of: 

computer viruses; 

worms; 

Trojans; 

banned computer programs; 
banned words; or 
banned images. 

15. (Original) A method as claimed in claim 10, wherein said method is performed by a 
firewall computer via which internet traffic is passed to a local computer network. 

16. (Original) A method as claimed in claim 10, wherein said addressed data is cached when 
it has been retrieved. 

17. (Original) A method as claimed in claim 10, wherein if rnalware is detected within said 
addressed data, then one or more rnalware found actions are triggered. 
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18. (Original) A method as claimed in claim 10, wherein said malware found actions 
including at least one of: 

(i) preventing access to said currently held data; 

(ii) removing said at least one internet address from said currently held data; 

(iii) preventing access to said addressed data; 

(iv) removing said malware from said addressed data to generate clean addressed data 
and supplying said clean addressed data in place of said addressed data; 

(v) blocking internet access by a computer detected to be seeking to access said at 
least one internet address. 

19. (Currently Amended) Apparatus for scanning data accessible via an internet link for 
malware, said apparatus comprising: 

(i) address identifying logic operable to identify within currently held data at least 
one internet address associated with said currently held data; 

(ii) retrieving logic operable to pre-emptively retrieve via said internet link addressed 
data that would be accessed by a user following corr e sponding to said at least one internet 
address; and 

(iii) scanning logic operable to scan said addressed data for malware. 

20. (Original) Apparatus as claimed in claim 19, further comprising storing logic operable to 
store result data identifying at least addressed data in which malware was not found. 

21. (Original) Apparatus as claimed in claim 19, wherein said address identifying logic is 
operable to search within said currently held data for string data having a format matching a 
pointer to an internet address. 

22. (Original) Apparatus as claimed in claim 19, wherein said currently held data includes 
received e-mail messages. 
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23. (Original) Apparatus as claimed in claim 19, wherein said scanning logic is operable to 
seek to detect within said addressed data one or more of: 

computer viruses; 

worms; 

Trojans; 

banned computer programs; 
banned words; or 
banned images. 

24. (Original) Apparatus as claimed in claim 19, wherein said computer is a firewall 
computer via which internet traffic is passed to a local computer network. 

25. (Original) Apparatus as claimed in claim 19, wherein said addressed data is cached when 
been retrieved. 

26. (Original) Apparatus as claimed in claim 19, wherein if malware is detected within said 
addressed data, then one or more malware found actions are triggered. 

27. (Original) Apparatus as claimed in claim 19, wherein said malware found actions 
including at least one of: 

(i) preventing access to said currently held data; 

(ii) removing said at least one internet address from said currently held data; 

(iii) preventing access to said addressed data; 

(iv) removing said malware from said addressed data to generate clean addressed data 
and supplying said clean addressed data in place of said addressed data; 

(v) blocking internet access by a computer detected to be seeking to access said at 
least one internet address. 
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